Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File:                     5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier:          Xz50S9Q9kp1ObByXQoN694ReJjzhvNWcFvx3ZagNf2o=
Subject key identifier:   45:AB:57:DA:CF:7F:D7:81:1B:FC:0D:5E:18:F7:3E:45:DF:C5:41:7E
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer:       /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial:       018F570441619ACBD77562221AB1ED272228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number:          0613
Signing time:             Wed 08 May 2024 07:04:07 +0000
Manifest this update:     Wed 08 May 2024 07:04:07 +0000
Manifest next update:     Thu 09 May 2024 07:04:07 +0000
Files and hashes:         1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: q3uUrlRqK7VN2ybm2tfKjbDO78N93Nb2CQVbCxdRelE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:04:41:61:9a:cb:d7:75:62:22:1a:b1:ed:27:22:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
        Validity
            Not Before: May  8 07:04:07 2024 GMT
            Not After : May  9 07:04:07 2024 GMT
        Subject: CN=45ab57dacf7fd7811bfc0d5e18f73e45dfc5417e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b7:95:02:ae:fc:89:ea:d2:94:12:f1:91:93:
                    28:89:09:49:77:82:b2:85:a4:c9:d4:40:9a:3c:3d:
                    b3:22:42:78:71:51:70:23:c9:f3:21:a5:ec:b3:3e:
                    ce:8b:30:b6:c1:f4:89:7e:c7:a1:f1:25:ba:ff:10:
                    59:66:c4:17:f9:bb:1e:86:b8:07:e3:88:4a:08:3d:
                    72:bd:5b:95:31:75:aa:c7:16:81:0c:4e:34:d0:b1:
                    36:99:f5:46:fd:74:01:90:2d:72:bb:f1:1f:36:85:
                    0b:ff:5f:c9:f0:ff:77:c0:84:02:45:1f:8e:b8:40:
                    db:ca:6a:cf:65:ab:fd:f8:85:74:65:2f:2d:c6:f7:
                    f8:3b:bf:d1:55:43:cd:4a:6f:c0:e8:0a:0f:18:e0:
                    c4:e1:33:5f:4a:42:b7:9c:46:1e:30:4f:02:49:b0:
                    98:5d:9c:8b:18:88:9e:46:35:4d:d0:17:fc:12:e1:
                    c2:bb:22:7f:72:eb:e4:78:34:81:71:85:11:6c:0b:
                    51:86:a7:8c:9c:c8:61:de:38:fa:cf:e6:e0:40:3c:
                    b2:f1:55:5e:7a:86:bd:f9:54:c9:38:ca:8b:00:c4:
                    33:6b:d3:5c:60:cf:e4:f4:75:74:6f:30:eb:c2:a2:
                    cd:19:dd:cb:86:f3:0f:e0:99:4a:ff:95:7a:fc:ca:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:57:DA:CF:7F:D7:81:1B:FC:0D:5E:18:F7:3E:45:DF:C5:41:7E
            X509v3 Authority Key Identifier:
                keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:81:54:68:29:a2:7f:d5:f9:89:df:3a:a1:c4:34:d3:e7:a0:
         87:2d:bd:60:7a:4f:8c:91:c9:49:f1:61:8a:0d:9c:b7:7f:e1:
         2c:68:b5:8a:8e:16:9b:22:cf:97:55:92:8e:17:14:78:67:6a:
         71:70:3e:63:30:e3:d5:19:71:5f:b0:90:da:cb:bf:a1:f3:52:
         bb:da:a1:38:23:7a:2e:04:43:3e:52:ff:6e:7c:e1:5b:01:58:
         4f:fe:95:12:0a:8e:1b:f1:35:29:d1:95:9a:fb:28:31:60:63:
         08:7a:cd:d8:99:c9:3b:4e:1b:28:f8:51:e6:a7:8e:22:a8:85:
         ed:38:b3:ef:7c:d8:a4:d5:99:4e:3c:d3:28:7c:ac:18:ae:5b:
         2f:50:7b:a6:a1:58:ed:ed:8a:66:22:29:68:26:b9:4c:1d:c5:
         03:48:7f:6c:c0:1f:7b:45:29:25:a4:d7:48:58:7b:2d:16:5d:
         4f:d0:96:4b:6c:d9:a7:c8:3e:29:df:e1:3c:b3:65:85:71:5a:
         ed:23:b7:69:aa:86:03:44:c3:e7:34:d5:2b:fd:e5:0d:7b:f1:
         c7:c5:6f:fb:f8:99:7d:2c:71:32:c7:19:18:63:7a:e4:7a:de:
         5f:96:55:91:81:c5:46:17:03:ed:b9:01:fd:8a:c6:82:ec:9d:
         c2:2a:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:21:04 2024 by rpki-client on console-ams.rpki-client.org